CVE-2023-42448

CVE-2023-42448 is a high-severity vulnerability affecting IOHK Hydra, the layer-two scalability solution for Cardano, specifically in versions prior to 0.13.0. The flaw allows a malicious participant to alter the contestation period during the transition from an Open to Closed head state, bypassing a critical check in the checkClose function. This could lead to unauthorized fund redistribution or prevent legitimate fan-out operations, resulting in high impact to integrity and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, the vulnerability carries a CVSS score of 8.1, indicating a high risk if exploited.